Bug#983110: buster-pu: package ipmitool/1.8.18-6 (CVE-2020-5208)
Hi Thomas,
[non-authoritative answer as not part of SRM]
On Fri, Feb 19, 2021 at 05:06:42PM +0100, Thomas Goirand wrote:
> Package: release.debian.org
> Severity: normal
> Tags: buster
> User: release.debian.org@packages.debian.org
> Usertags: pu
>
> Dear Stable release team,
>
> I would like to update the ipmitool package in Buster, to
> address CVE-2020-5208. Attached is the debdiff including
> the upstream patches, backported to the current codebase
> in Buster. Please allow me to upload.
>
> Note that I already uploaded this to Sid, through the
> DELAYED/5 queue. I was also able to quickly check that the
> basic ipmitool functionalities work (ie: by using ipmitool
> commands like "chassis power status" and so on...).
>
> Cheers,
>
> Thomas Goirand (zigo)
> diff -Nru ipmitool-1.8.18/debian/changelog ipmitool-1.8.18/debian/changelog
> --- ipmitool-1.8.18/debian/changelog 2018-08-05 12:20:50.000000000 +0200
> +++ ipmitool-1.8.18/debian/changelog 2021-02-19 11:30:06.000000000 +0100
> @@ -1,3 +1,18 @@
> +ipmitool (1.8.18-6+deb10u1) buster-security; urgency=medium
Thanks for preparing this update! For the buster update, please adjust
the target distribution to 'buster'.
Regards,
Salvatore
Reply to: